IN THE CLAIMS 



This listing of claims will replace all prior versions, and listings, of claims in 
the application: 

Amendments to the claims 

1 . (Currently amended) A portable data storage device comprising: 

a non-volatile memory for stor i ng usor to store data, 
an interface section for roco i ving to receive data from and transm i tt i ng 
transmit data to a host, 

a master control unit for transf e rr i ng to transfer data to and from the non- 
volatile memory, and 

an integrated circuit m e ans for g e n e rat i ng to generate at least one key, 
wherein the portable data storage device laeimj is_arranged, upon receiving a 
command from [[a]] the host requesting the data stored in the non-volatile memory , 
to generate at least one key, to encrypt the generated key using a secret key that is 
permanently stored in the portable storage device and to transmit the encrypted key 
and the requested data stored in its the non-volatile memory to the host using the 
interface section, and to transm i t a koy gonoratod by tho i ntogratod c i rcu i t moans to 
tho host us i ng tho i ntorfaco sect i on 

wherein the portable data storage device is further arranged to receive from 
the host a digital signature based on the generated key and the requested data for 
use in verifying that the requested data has been correctly received by the host. 

2. (Canceled) 

3. (Currently amended) [[A]] The portable data storage device according to claim 
1 2 i n wh i ch wherein the digital signature is produced by hashing the received data 
to generate a hash result, and encrypting the hash result using the generated key. 
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4. (Currently amended) [[A]] The portable data storage device according to claim 
1 i n wh i ch wherein the generated key is one key of a public key/private key pair. 



5. (Currently amended) [[A]] The portable data storage device according to claim 
4 i n wh i ch wherein the verification of the digital signature is performed in the 
portable data storage device using the public key. 

6. (Canceled) 

7. (Currently amended) [[A]] The portable data storage device according to claim 
6 i n wh i ch wherein the requested data includes both data present in the non-volatile 
memory, and also biometric data obtained from a biometric sensor of the portable 
data storage device. 

8. (Currently amended) [[A]] The portable data storage device according to claim 
1 arranged to transmit the requested data in an encrypted form. 

9. (Currently amended) [[A]] The portable data storage device according to claim 
1 , further comprising: 

a biometric sensor; and 

a_verification engine for granting access to data stored in the portable data 
storage device based on a biometric verification of the user's identity by comparison 
of biometric data received using the biometric sensor with pre-stored biometric data. 

1 0. (Currently amended) [[A]] The portable data storage device according to claim 
1 including a compression algorithm for exploiting any redundancy in data received 
by the portable data storage device to compress it before storing it in the non- 
volatile memory, and a decompression engine to regenerate the data before it is 
transmitted from the portable data storage device. 
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1 1 . (Currently amended) [[A]] The portable data storage device according to claim 

I in which the interface section includes a USB connector and a USB interface 
device. 

1 2. (Currently amended) [[A]] The portable data storage device according to claim 

I I in which the connector is a USB plug integral with the m e mory portable data 
storage device. 

1 3. (Currently amended) [[A]] The portable data storage device according to claim 
1 4-2-in which the interface section is for wireless communication with [[a]] the host. 

1 4. (Currently amended) [[A]] The portable data storage device according to claim 
1 having a housing, the housing including a narrowed end for use as a pointer. 

1 5. (Currently amended) [[A]] The portable data storage device according to claim 
1 , further including a camera for generating image data, and/or a microphone for 
capturing audio data, the master control unit being arranged to store the image data 
and/or the audio data in the memory. 

16. (Currently amended) A system comprising: I n comb i nat i on 

a portable data storage device including accord i ng to c l a i m 1 
a non-volatile memory to store data. 

an interface section to receive data from and transmit data to a host. 

a master control unit to transfer data to and from the non-volatile 
memory, and 

integrated circuit for generating at least one key. 

the portable data storage device being arranged, upon receiving a 
command from the host requesting the data stored in the non-volatile 
memory, to generate at least one key, to encrypt the generated key using a 
secret key that is permanently stored in the portable storage device and to 
transmit the encrypted key and the requested data stored in the non-volatile 
memory to the host using the interface section. 
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wherein the portable data storage device is further arranged to receive 
from the host a digital signature based on the generated key and the 
requested data for use in verifying that the requested data has been correctly 
received by the host ; and 

a host computer, the host computer being arranged to transmit a command to 
the portable data storage device using the interface section to request the data. 

1 7. (Currently amended) A comb i nat i on The system according to claim 1 6 wherein 
the generated key is one key of a public key/private key pair, dov i co i s accord i ng to 
c l a i m 2 and the host bo i ng is arranged to generate a digital signature using the 
private key and the requested data. 

18. (Canceled) 

1 9. (Currently amended) A method of transferring data from a portable data 
storage device to a host, the host and the portable data storage device each having 
a permanently stored secret key , the method comprising the steps of: 

the portable data storage device receiving an instruction from [[a]] the host 
requesting the data stored in a non-volatile memory of the portable data storage 
device; 

the portable data storage device generating at least one key w i th i n tho 
dG v i cG ' 

the portable data storage device encrypting the generated key using the 
secret key permanently stored in the portable data storage device; 

the portable data storage device obtaining the requested data from the non- 
volatile memory w i th i n tho dov i co; and the portable data storage device transmitting 
to the host the requested data and the encrypted key: 

the host decrypting the encrypted key using the secret key permanently 
stored in the host; 

the host generating a digital signature based on the decrypted key and the 
requested data; 
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the host transmitting the digital signature from the host to the portable data 
storage device; and 

the portable data storage device using the digital signature to verify that the 
requested data has been correctly received by the host. 

20. (Canceled) 

21 . (Currently amended) The [[A]] method according to claim 19 20 wherein the 
host generates the digital signature using the private key and the requested data. 

22. (Currently amended) The [[A]] method according to claim 19 20 in which the 
digital signature is produced by hashing the received data to generate a hash result, 
and encrypting the hash result using the generated key. 

23. (Currently amended) The [[A]] method according to claim 19 in which the 
generated key is the a private key of a public key/private key pair. 

24. (Currently amended) The [[A]] method according to claim 23 in which the 
verification of the digital signature is performed in the portable data storage device 
using the public key. 

25. (Canceled) 

26. (Canceled) 

27. (Currently amended) [[A]] The method according to claim [[25]] 19 in which the 
requested data includes both data present in the memory, and also biometric data 
obtained from a biometric sensor of the portable data storage device. 

28. (Currently amended) [[A]] The method according to claim 1 9, in which the 
requested data is transmitted from the portable data storage device to the host in an 
encrypted form. 
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29. (Currently amended) [[A]] The method according to claim 1 9, further 
comprising verifying the a user's identity by comparison of biometric data received 
using a the biometric sensor with pre-stored biometric data, and upon this 
verification for granting access to the data stored in the portable data storage 
device . 

30. (Currently amended) [[A]] The method according to claim 1 9, including: 

the portable data storage device receiving data from the host, the portable 
data storage device exploiting any redundancy in the data to compress it, and the 
portable data storage device storing it the data in the non-volatile memory; and 

upon the data being requested by the host, regenerating the data and 
transmitting it from the portable data storage device. 
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